Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9148AC0/E4ED539431D811EE83006A41C4F9AE02/5C9259B631DA11EEBE28A546C4F9AE02.roa
File: 5C9259B631DA11EEBE28A546C4F9AE02.roa (raw, json)
Hash identifier: V/GHEmcZXIPqnvjusU9+mbGUzJT92uVcYMqnl8YTyFc=
Subject key identifier: 44:93:72:A2:5D:45:5B:D3:CE:58:26:A5:21:CF:0D:96:01:3E:8E:CF
Certificate issuer: /CN=A9148AC0/serialNumber=766857BA3F7C728B680525AC41FA7CE2A1F0092D
Certificate serial: F7
Authority key identifier: 76:68:57:BA:3F:7C:72:8B:68:05:25:AC:41:FA:7C:E2:A1:F0:09:2D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dmhXuj98cotoBSWsQfp84qHwCS0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9148AC0/E4ED539431D811EE83006A41C4F9AE02/5C9259B631DA11EEBE28A546C4F9AE02.roa
Signing time: Sun 03 Nov 2024 03:37:07 +0000
ROA not before: Sun 03 Nov 2024 03:37:06 +0000
ROA not after: Tue 30 Dec 2025 00:00:00 +0000
asID: 139671
IP address blocks: 103.143.112.0/23 maxlen: 23
2405:4cc0::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 247 (0xf7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9148AC0/serialNumber=766857BA3F7C728B680525AC41FA7CE2A1F0092D
Validity
Not Before: Nov 3 03:37:06 2024 GMT
Not After : Dec 30 00:00:00 2025 GMT
Subject: CN=6726efe2-4adf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:e3:c5:4f:be:9f:0d:85:c8:8f:d4:e2:b7:a7:
fb:30:9b:62:a9:a3:ac:db:ed:1e:e9:0a:39:bc:26:
9a:40:38:9c:20:f6:8a:10:08:a9:56:97:4f:1b:ee:
e2:4f:f4:93:f7:ce:d6:ca:e8:4b:d9:8f:e1:28:4f:
e5:95:61:37:cc:36:0a:f9:fa:a0:80:93:67:a2:1c:
de:ac:fd:65:09:80:62:07:08:d0:d9:09:08:42:c5:
7e:15:81:e3:ad:20:1c:f6:05:ff:51:38:22:2b:ad:
50:72:37:d3:67:31:ce:0c:77:c9:a5:4f:fc:ce:f0:
34:ad:79:02:28:58:2b:69:f8:2f:b2:ec:84:0b:a8:
45:9d:4a:5b:94:db:43:39:62:46:da:7e:85:e4:b6:
19:e0:e1:c8:c5:6d:8a:2f:24:9e:29:43:fa:3c:cc:
29:f0:87:df:83:d0:91:13:31:c2:b6:79:b9:7b:20:
b8:b1:d9:6b:fe:dc:de:f4:32:4b:e3:68:13:e2:52:
e6:a1:28:73:e0:2e:d0:32:c8:94:6a:59:ae:11:85:
14:ad:83:be:8d:d9:30:33:e8:32:59:09:85:14:94:
9e:2d:26:72:c4:6c:7d:cc:5a:1c:f3:ed:7a:1f:7e:
a3:08:27:b7:97:8a:79:4a:b2:4b:81:01:4a:72:e5:
ff:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:93:72:A2:5D:45:5B:D3:CE:58:26:A5:21:CF:0D:96:01:3E:8E:CF
X509v3 Authority Key Identifier:
keyid:76:68:57:BA:3F:7C:72:8B:68:05:25:AC:41:FA:7C:E2:A1:F0:09:2D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9148AC0/E4ED539431D811EE83006A41C4F9AE02/dmhXuj98cotoBSWsQfp84qHwCS0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dmhXuj98cotoBSWsQfp84qHwCS0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148AC0/E4ED539431D811EE83006A41C4F9AE02/5C9259B631DA11EEBE28A546C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.143.112.0/23
IPv6:
2405:4cc0::/32
Signature Algorithm: sha256WithRSAEncryption
33:a5:5c:0c:d5:98:25:0b:36:88:33:76:c8:96:19:b8:1c:ab:
85:e6:d3:80:98:b9:f0:53:ee:d0:70:07:67:cd:4d:24:9d:d3:
bf:1a:d8:5a:ce:c0:f1:bf:9e:fa:82:6a:14:21:58:7a:00:28:
d2:66:90:b6:50:76:99:77:c5:1d:c3:4e:c9:98:32:1b:6e:93:
70:b3:47:dc:fb:df:fb:c6:50:79:af:d9:cb:ec:f4:3c:d5:d7:
46:f4:87:c2:31:a6:62:ec:04:06:82:b1:68:52:af:28:06:59:
ed:5a:83:19:ab:84:77:37:4c:96:ac:d8:27:e1:f6:eb:68:d8:
04:3a:75:00:19:69:d7:f1:fe:d6:87:09:f3:93:20:c1:f9:b5:
de:e3:75:d5:61:d2:c5:06:f2:e9:75:8b:de:f8:82:c3:f6:25:
08:10:0c:ad:1e:26:ca:fe:9b:bc:65:e6:e6:aa:85:61:73:e1:
8b:0b:f0:58:48:6e:4b:94:28:64:ed:d5:07:36:c0:ee:d4:6c:
7a:65:5a:c9:4d:e4:26:d6:6f:90:7a:50:c7:36:39:cf:3e:e5:
9c:0c:07:01:92:0b:f4:6a:df:21:2d:a3:3e:67:5b:c3:3f:01:
8d:80:27:03:3c:b1:88:d3:f2:5c:f1:94:1b:a5:90:13:c8:62:
91:23:c7:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 14:44:59 2025 by rpki-client